fixed: deny flow